While the number of ransomware attacks increased in 2024, the amount of money stolen by these groups dropped significantly to $814 million, from a record $1.25 billion in 2023. Blockchain analytics firm Chainalysis attributes this decline to various factors, including increased law enforcement actions and sanctions, as well as a growing reluctance among victims to pay ransoms.
Though the number of ransomware attacks increased in 2024, ransomware gangs made less money, pulling in $814 million compared to 2023’s record-high sum of $1.25 billion. The blockchain analytics firm attributes the decline to a variety of factors, including an uptick in law enforcement actions and sanctions, as well as a growing refusal by victims to pay their attackers.
Last year, less than half of all recorded ransomware attacks resulted in victim payments. Jacqueline Burns Koven, Chainalysis’ head of cyber threat intelligence, told CoinDesk that part of the non-payment trend can be attributed to a growing distrust that complying with attackers’ demands will actually result in victims’ stolen data being deleted from the attacker’s possession. In February 2024, American insurance company United Healthcare paid a $22 million ransom to Russian ransomware gang BlackCat after one of its subsidiaries was breached and patient data exposed. But BlackCat imploded shortly after the ransom was paid, and the data United Healthcare had paid to protect was leaked. Similarly, the takedown of another Russian ransomware gang, LockBit, by U.S. and U.K. law enforcement in early 2024 also revealed that the group did not actually delete victims’ data as promised.“There's been a spate of sanctions against different ransomware groups and for some entities, it's outside of their risk threshold to be willing to pay them because it constitutes sanctions risk,” Koven said. Chainalysis’ report points to one other reason for decreased payments in 2024 – victims are wising up. Lizzie Cookson, senior director of incident response at Coveware, a ransomware incident response firm, told Chainalysis that, due to improved cyber hygiene, many victims are now better able to resist attackers’ demands. “They may ultimately determine that a decryption tool is their best option and negotiate to reduce the final payment, but more often, they find that restoring from recent backups is the faster and more cost-effective path,” Cookson said in the report.Chainalysis’ report also suggests that ransomware attackers are also struggling with cashing-out their ill-gotten gains. The firm found a “substantial decline” in the use of crypto mixers in 2024, which the report attributed to the “disruptive impact of sanctions and law enforcement actions, such as those against Chipmixer, Tornado Cash, and Sinbad.” Last year, more ransomware actors simply held their funds in personal wallets, according to the report. “Curiously, ransomware operators, a primarily financially motivated group, are abstaining from cashing out more than ever," it said. "We attribute this largely to increased caution and uncertainty amid what is probably perceived as law enforcement’s unpredictable and decisive actions targeting individuals and services participating in or facilitating ransomware laundering, resulting in insecurity among threat actors about where they can safely put their funds."Despite the clear impact of law enforcement’s crackdown on ransomware gangs last year, Koven stressed that it’s too early to say whether the downward trend is here to stay. “I think it is premature to be celebrating, because all the factors are there for it to reverse in 2025, for those large attacks — the big game hunting — to resume,” Koven said.On the news team at CoinDesk, Cheyenne focuses on crypto regulation and crime. Cheyenne is originally from Houston, Texas. She studied political science at Tulane University in Louisiana. In December 2021, she graduated from CUNY's Craig Newmark Graduate School of Journalism, where she focused on business and economics reporting. She has no significant crypto holdings.
Technology RANSOMWARE CYBERSECURITY LAW ENFORCEMENT SANCTIONS VICTIM PAYMENTS
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Adams Attacks Cuomo Over Bail Reform in Potential 2024 Primary ShowdownNYC Mayor Eric Adams took aim at potential Democratic primary rival Andrew Cuomo, criticizing his signature bail reform law. Adams signaled his intention to launch his reelection campaign aggressively by targeting Cuomo's record. While Cuomo has not formally declared his candidacy, he is rumored to be considering a run against Adams in 2024.
Read more »
Click Attacks Triple in 2024: A Warning for All Email UsersA new analysis reveals a dramatic increase in click attacks in 2024, urging all email users to exercise extreme caution. The report attributes the surge to cognitive fatigue from constant phishing attempts and increasingly sophisticated attackers.
Read more »
Golden Globes Ratings Drops in 2025, Down from Abysmal 2024 ViewershipSource of breaking news and analysis, insightful commentary and original reporting, curated and written specifically for the new generation of independent and conservative thinkers.
Read more »
2024 Golden Globe Awards Fashion Roundup + Faby's Best of 2024This article covers the red carpet fashion at the 2024 Golden Globe Awards, highlighting standout looks from Zendaya, Janelle James, Sheryl Lee Ralph, and Rihanna. It also promotes voting for various categories in The Fabys Awards of 2024, including Best Wig Hairstylist, Best Natural Hairstylist, Best Makeup Artist, Best Stylist, and Most Fashionable Couple.
Read more »
Ransomware Attacks Remain a Growing Threat in 2024A new report reveals that ransomware attacks continued to plague organizations in 2024, with millions of records compromised and significant ransoms paid. The report highlights the persistent threat posed by these cybercriminals and predicts a continued rise in attacks in 2025.
Read more »
Ransomware Payments Drastically Decline in 2024 Despite High-Profile AttacksWhile 2024 saw several high-profile ransomware attacks, including one on Change Healthcare, overall payments to cybercriminals dropped by 35% compared to the previous year. Chainalysis attributes this decline to successful law enforcement takedowns of major ransomware groups like AlphV and Lockbit, which disrupted their operations and infrastructure.
Read more »